CVE-2009-3884: Medium severity sun java runtime environment (jre) vulnerability
The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3884?
CVE-2009-3884 has a moderate severity rating, as it allows remote attackers to determine the existence of local files.
How do I fix CVE-2009-3884?
To fix CVE-2009-3884, update to the latest version of Sun Java SE 5.0 Update 22 or 6 Update 17, or a newer version.
Which software is affected by CVE-2009-3884?
CVE-2009-3884 affects Sun Java SE 5.0 versions before Update 22 and Sun Java SE 6 versions before Update 17.
What potential impact does CVE-2009-3884 have?
The potential impact of CVE-2009-3884 includes exposing sensitive local file information to remote attackers.
Is CVE-2009-3884 relevant to OpenJDK?
Yes, CVE-2009-3884 is also applicable to OpenJDK implementations.